Reduce Accept-Language #1078
Labels
Focus: Internationalization (pending)
i18n-needs-resolution
Issue the Internationalization Group has raised and looks for a response on.
Missing: venue
privacy-tracker
Group bringing to attention of Privacy, or tracked by the Privacy Group but not needing response.
Progress: in progress
Progress: pending external feedback
The TAG is waiting on response to comments/questions asked by the TAG during the review
Topic: privacy
Venue: WHATWG
Hi there TAG,
I'm requesting a TAG review of Reduce Accept-Language and the plan to reduce the information available in the Accept-Language HTTP header first, and then reduce related JS APIs navigator.languages in future phases.
Chrome (and other browsers) send all of the user's language preferences on every HTTP request via the Accept-Language header. The header's value contains a lot of entropy about the user that is sent to servers by default. We want to reduce the amount of information the Accept-Language header exposes in HTTP requests and JS interface navigator.languages. Instead of sending all user’s Accept-Language, we only send the user’s most preferred language after language negotiation in the Accept-Language header. For the HTTP Accept-Language header, we will potentially expand a base language based on the language-region pair. The JS getter navigator.languages returns the same value as navigator.language.
https://github.com/explainers-by-googlers/reduce-accept-language/blob/main/README.md
https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/web_tests/navigator_language
Victor Tan (@Tanych - editor)
Mike Taylor(@miketaylr - editor)
https://chromestatus.com/feature/5188040623390720
Further details:
The text was updated successfully, but these errors were encountered: